README-CERTS.md

Generating Certificate

Generate certificates in subdirectory ssl.

Root CA

$ openssl genrsa -out dockerwatch-ca.key 4096

$ openssl req -x509 -new -nodes -key dockerwatch-ca.key -sha256 -days 1024 -out dockerwatch-ca.pem

Server Certificate

$ openssl genrsa -out dockerwatch-server.key 4096

Certificate signing request

$ openssl req -new -key dockerwatch-server.key -out dockerwatch-server.csr

The most important field: Common Name (eg, YOUR name) []: localhost. We use localhost in this example.

Sign it

$ openssl x509 -req -in dockerwatch-server.csr -CA dockerwatch-ca.pem -CAkey dockerwatch-ca.key -CAcreateserial -out dockerwatch-server.pem -days 500 -sha256